asked on

Cisco 2851 configuration for a single T1 on a dual port WIC - config review

Noob on Cisco routers. I have a new Cisco 2851 router with dual port WIC in slot 0. This is for a single T1 internet connection. Verizon tech did the config for the router. I'm not able to access the internet and have pull the config. I don't see the WAN ip configured on the serial interface... i think that is the problem. Below is the config of the router: Does the config look right? Am I correct in that the WAN ip is needed on serial interface to route outbound traffic to Verizon? If so, what and how to make changes to make this work?

hostname u123456
no service udp-small-servers
no service tcp-small-servers
!
ip subnet-zero
ip routing
no ip http server
!
enable-password ******
!
controller T1 0/0/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
 
interface GigabitEthernet0/0
ip address 65.215.x.x 255.255.255.248
duplex auto
speed auto
!
interface Serial 0/0/0:0
description to UUNET u123456
no ip address
no ip redirects
no ip proxy-arp
encapsulation frame-relay IETF
no ip mroute-cache
no fair-queue
frame-relay lmi-type ansi
!
interface Serial 0/0/0:0.1 point-to-point
ip unnumbered GigabitEthernet0/0
no arp frame-relay
frame-relay interface-dlci 500 IETF
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0:0.1
!
ip domain-name ALTER.NET
ip name-server 198.6.100.38
!
line con 0
login
password ******
transport preferred none
!
line aux 0
login
password ******
modem InOut
transport preferred none
transport input all
transport output all
stopbits 1
rxspeed 9600
txspeed 9600
flowcontrol hardware
!
line vty 0 4
login
password ******
transport preferred none

Open in new window

bfason

config on the router looks ok depending on what you are using for internal Ip addresses. Do you have another device doing Nat?

99YammieR1

ASKER

bfason, i have a pix firewall sitting behind the router that does nat. i don't need nat on the router. why isn't the wan ip i got from the isp not configured on the serial interface?

ASKER CERTIFIED SOLUTION

bfason

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

99YammieR1

ASKER

bfason, definitely helps. after talking to the verizon tech, i did get the cpe wan ip from him. this ip is on a 255.255.255.252 subnet and is not part of the block of lan ip i got. the g0/0 lan ip is not the same scheme as the wan serial ip. if i replace "ip unnumbered g0/0" with ip x.x.x.x 255.255.255.252 (the router wan ip i got from verizon) for s0/0/0.1 then it'll be able to talk to the isp side.

bfason

Great, let us know how it works out for you.

99YammieR1

ASKER

I changed the ip on serial0/0/0:0.1 from "ip unnumbered g0/0" to "ip x.x.x.x 255.255.255.252" but still no go. I can see the lan side of the router.

bfason

From the router can you ping the isp gateway?

Another thing is the gateway of last resort. I would change it from ip route 0.0.0.0 0.0.0.0 s0/0/0.1 to ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx

99YammieR1

ASKER

no i cannot ping the isp gateway (the router wan ip i've assigned to s0/0/0.1)

bfason

Is the gateway address and the given S0/0/0.1 address in the same subnet?

When you do a "show ip int brief" is s0/0/0.1 up and up?

If so do a "show frame pvc" and see if the pvc is active.

99YammieR1

ASKER

Verizon address and CPE address are on the same subnet, 255.255.255.252.

GigabitEthernet0/0 65.215.53.xxx YES NVRAM up up

GigabitEthernet0/1 unassigned YES NVRAM administratively down down

Serial0/0/0:0 unassigned YES NVRAM up down

Serial0/0/0:0.1 63.111.121.xxx YES NVRAM down

SOLUTION

bfason

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

99YammieR1

ASKER

yep, circuit wasn't up. it's resolved now. thanks for all your help. greatly appreicate it.